Code: Select all
"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"14:41:07,5779970","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:07,5780245","TextPad.exe","876","RegOpenKey","HKLM\SOFTWARE\DigitalPersona\Tracing","NAME NOT FOUND","Desired Access: Read"
"14:41:08,8192852","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:08,8777758","TextPad.exe","876","QueryStandardInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"14:41:08,9111157","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"14:41:08,9112711","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:08,9113053","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:08,9113242","TextPad.exe","876","FileSystemControl","\\192.168.1.2\ville\Documents\test.c","INVALID DEVICE REQUEST","Control: FSCTL_QUERY_FILE_REGIONS"
"14:41:08,9283714","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:08,9353558","TextPad.exe","876","FileSystemControl","\\192.168.1.2\ville\Documents\test.c","INVALID DEVICE REQUEST","Control: FSCTL_QUERY_FILE_REGIONS"
"14:41:08,9625984","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"14:41:09,0090901","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:09,0091496","TextPad.exe","876","QueryStandardInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 77Â 824, EndOfFile: 15Â 102, NumberOfLinks: 1, DeletePending: False, Directory: False"
"14:41:09,0091714","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:11,8613942","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"14:41:11,8615325","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:11,8615491","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:11,8715203","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"14:41:11,8716912","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:11,8717232","TextPad.exe","876","QueryStandardInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 77Â 824, EndOfFile: 15Â 102, NumberOfLinks: 1, DeletePending: False, Directory: False"
"14:41:11,8717399","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:11,8910881","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"14:41:11,8911953","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:11,8912502","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:11,9208953","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"14:41:11,9210202","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:11,9210374","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:11,9302902","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Generic Read/Write, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
"14:41:11,9356678","TextPad.exe","876","SetAllocationInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 0"
"14:41:11,9398936","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:11,9458403","TextPad.exe","876","QueryStandardInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"14:41:11,9702384","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"14:41:11,9703882","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:11,9704052","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:11,9705935","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:11,9706845","TextPad.exe","876","QueryStandardInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"14:41:11,9894720","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"14:41:11,9896447","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:11,9896611","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:11,9897692","TextPad.exe","876","SetEndOfFileInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","EndOfFile: 0"
"14:41:11,9897901","TextPad.exe","876","SetAllocationInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 0"
"14:41:11,9937283","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:12,0062038","TextPad.exe","876","QueryStandardInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"14:41:12,0305809","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"14:41:12,0307158","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:12,0307326","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:12,0350422","TextPad.exe","876","WriteFile","\\192.168.1.2\ville\Documents\test.c","INVALID PARAMETER","Offset: 0, Length: 4Â 096, Priority: Normal"
"14:41:12,0403917","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:12,0442120","TextPad.exe","876","QueryStandardInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"14:41:12,0669700","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"14:41:12,0671097","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:12,0671282","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:12,0673557","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:12,0673826","TextPad.exe","876","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace","SUCCESS","Desired Access: Query Value"
"14:41:12,0674113","TextPad.exe","876","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\ValidateRegItems","NAME NOT FOUND","Length: 16"
"14:41:12,0674497","TextPad.exe","876","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace","SUCCESS",""
"14:41:12,0674688","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:12,0674872","TextPad.exe","876","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace","SUCCESS","Desired Access: Query Value"
"14:41:12,0675084","TextPad.exe","876","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\MonitorRegistry","NAME NOT FOUND","Length: 16"
"14:41:12,0675271","TextPad.exe","876","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace","SUCCESS",""
"14:41:12,0675942","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:12,0676124","TextPad.exe","876","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace","SUCCESS","Desired Access: Query Value"
"14:41:12,0676337","TextPad.exe","876","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace\ValidateRegItems","NAME NOT FOUND","Length: 16"
"14:41:12,0676519","TextPad.exe","876","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace","SUCCESS",""
"14:41:12,0676682","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:12,0676852","TextPad.exe","876","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace","SUCCESS","Desired Access: Query Value"
"14:41:12,0677033","TextPad.exe","876","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace\MonitorRegistry","NAME NOT FOUND","Length: 16"
"14:41:12,0677206","TextPad.exe","876","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace","SUCCESS",""
"14:41:12,0677737","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:12,0677917","TextPad.exe","876","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace","SUCCESS","Desired Access: Query Value"
"14:41:12,0678107","TextPad.exe","876","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace\ValidateRegItems","NAME NOT FOUND","Length: 16"
"14:41:12,0678292","TextPad.exe","876","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace","SUCCESS",""
"14:41:12,0678452","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:12,0678622","TextPad.exe","876","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace","SUCCESS","Desired Access: Query Value"
"14:41:12,0678815","TextPad.exe","876","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace\MonitorRegistry","NAME NOT FOUND","Length: 16"
"14:41:12,0678988","TextPad.exe","876","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace","SUCCESS",""
"14:41:12,6685387","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:12,6685829","TextPad.exe","876","RegOpenKey","HKLM\SOFTWARE\DigitalPersona\Tracing","NAME NOT FOUND","Desired Access: Read"
"14:41:13,9171151","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:13,9977158","TextPad.exe","876","QueryStandardInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"14:41:14,0263009","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"14:41:14,0264245","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:14,0264588","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:14,0264783","TextPad.exe","876","FileSystemControl","\\192.168.1.2\ville\Documents\test.c","INVALID DEVICE REQUEST","Control: FSCTL_QUERY_FILE_REGIONS"
"14:41:14,0357064","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:14,0405026","TextPad.exe","876","FileSystemControl","\\192.168.1.2\ville\Documents\test.c","INVALID DEVICE REQUEST","Control: FSCTL_QUERY_FILE_REGIONS"
"14:41:14,0592668","TextPad.exe","876","CreateFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"14:41:14,0635654","TextPad.exe","876","QueryBasicInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","CreationTime: 2019-10-22 14:44:17, LastAccessTime: 2022-05-12 14:40:11, LastWriteTime: 2022-05-12 14:39:52, ChangeTime: 2022-05-12 14:39:52, FileAttributes: N"
"14:41:14,0685001","TextPad.exe","876","QueryStandardInformationFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"14:41:14,0685243","TextPad.exe","876","CloseFile","\\192.168.1.2\ville\Documents\test.c","SUCCESS",""
"14:41:17,7377607","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:17,7377819","TextPad.exe","876","RegOpenKey","HKLM\SOFTWARE\DigitalPersona\Tracing","NAME NOT FOUND","Desired Access: Read"
"14:41:22,8153347","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:22,8153573","TextPad.exe","876","RegOpenKey","HKLM\SOFTWARE\DigitalPersona\Tracing","NAME NOT FOUND","Desired Access: Read"
"14:41:27,8904047","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:27,8904532","TextPad.exe","876","RegOpenKey","HKLM\SOFTWARE\DigitalPersona\Tracing","NAME NOT FOUND","Desired Access: Read"
"14:41:28,7305389","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:28,7305617","TextPad.exe","876","RegOpenKey","HKLM\SOFTWARE\DigitalPersona\Tracing","NAME NOT FOUND","Desired Access: Read"
"14:41:28,7305883","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:28,7306030","TextPad.exe","876","RegOpenKey","HKLM\SOFTWARE\DigitalPersona\Tracing","NAME NOT FOUND","Desired Access: Read"
"14:41:28,7306200","TextPad.exe","876","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"14:41:28,7306346","TextPad.exe","876","RegOpenKey","HKLM\SOFTWARE\DigitalPersona\Tracing","NAME NOT FOUND","Desired Access: Read"